Mikaela/gist
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/gist.git synced 2026-01-14 23:07:54 +01:00
Code Issues Projects Releases Wiki Activity

fineid: add essentials about using Atostek ID

Browse Source
This commit is contained in:
Aminda Suomalainen 2026-01-14 10:43:49 +02:00
parent 9403864f89
commit df4cf11fed
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
1 changed files with 29 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
fineid/README.md
View File

@ -42,18 +42,30 @@ module: /usr/lib64/libcryptoki.so
managed: no
```
or with the 2026 application `/etc/pkcs11/modules/atostek.module`:
```
module: /usr/lib64/Atostek-ID-PKCS11.so
managed: no
```
## Chromium
Should work as long as the `DigiSignApplication` from above was running before
the browser was started.
Should work as long as the `DigiSignApplication` XOR `atostekid` from above
was running before the browser was started.
In case of issues with `atostekid`, try closing the browser and running
`atostekid-setup-user-browser.sh`.
## Firefox and Thunderbird
**_This doesn't apply if the above libcryptoki.so is created and preferably
`libcryptoki.so` would be loaded anyway_**
**_This shouldn't apply if the above `libcryptoki.module` or `atostek.module`
is created and preferably `libcryptoki.so` or Atostek-ID-PKCS11.so would be
loaded anyway_**
In Settings, Advanced, Security devices load the module from (DVV app)
`/usr/lib64/libcryptoki.so` or (OpenSC):
In Settings, Advanced, Security devices load the module from DVV app before
2026 `/usr/lib64/libcryptoki.so` or `/usr/lib64/Atostek-ID-PKCS11.so` since
2026 or OpenSC:
- Debian: `/usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so`
- Package: `opensc-pkcs11`
@ -77,6 +89,9 @@ doesn't exist:
"policies": {
"SecurityDevices": {
"Add": {
"Atostek ID": "/usr/lib64/Atostek-ID-PKCS11.so",
"Debian OpenSC onepin": "/usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so",
"Fedora OpenSC onepin": "/usr/lib64/onepin-opensc-pkcs11.so",
"Fujitsu mPollux DigiSignApplication": "/usr/lib64/libcryptoki.so"
}
}
@ -84,6 +99,14 @@ doesn't exist:
}
```
Firefox will silently ignore missing security devices, unless the user
explicitly navigates to `about:policies#errors` which will log
> Unable to add security device Debian OpenSC onepin Unable to add security
> device Fujitsu mPollux DigiSignApplication
on _Fedora Linux 43.20260114.0 (Kinoite)_ when using Atostek ID.
## Okular
Okular is the KDE document viewer and supports signing PDF files using FINEID!